$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa File: ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa (raw, json) Hash identifier: wQPTmOTUEhcR5zMEOykWqA+e+j/MT9F7BJ78Lg/6sRM= Subject key identifier: 30:A6:BD:82:8A:A5:8D:F9:EF:FB:2A:BC:2B:41:64:D2:F2:D1:F2:09 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858486D90600249636CE42B5D3D40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 8069 IP address blocks: 52.122.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:60:02:49:63:6c:e4:2b:5d:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=fe410784-67ec-4af3-b140-7393a68f87b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:c8:53:70:86:e3:f6:82:79:63:57:4c:e9: e9:c7:79:88:4c:2a:f4:97:4e:4c:a9:b3:e2:24:13: 09:df:b3:c1:ea:9e:ac:57:58:f3:06:3d:34:42:ef: e9:5c:17:d1:37:3d:3d:21:c2:43:72:a8:5a:6a:56: 59:58:6a:f1:b3:0e:ea:81:41:fc:ce:fc:87:a5:44: d4:d9:6c:18:9a:f7:d5:e3:01:80:1b:b5:fb:d5:bf: 22:f8:a6:3d:f3:28:9d:41:ef:98:b3:58:e7:25:12: 9d:6a:a3:c3:a0:22:49:d1:45:eb:62:6e:68:ff:50: df:95:3b:6a:72:e5:20:2c:f7:27:b5:a9:2b:00:7d: 12:23:b1:03:5b:71:74:65:86:64:18:1a:54:d9:6b: 1d:b1:a9:3f:77:8e:3a:01:6a:2f:7b:52:f7:aa:26: a2:4f:6d:eb:75:9d:ff:af:ad:c5:4e:43:7c:fe:8a: ac:b2:20:a7:a2:6d:df:a8:29:7f:e1:1c:28:81:6b: 62:51:91:6c:34:07:62:c8:66:48:45:00:e8:ca:a4: 79:6f:9e:dc:8b:3d:86:cd:68:43:7a:86:23:b6:97: 8c:3e:64:7e:02:32:51:43:38:84:7a:b5:87:21:a8: 97:b9:99:4e:0c:5e:29:4e:1c:9f:04:42:12:6c:95: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A6:BD:82:8A:A5:8D:F9:EF:FB:2A:BC:2B:41:64:D2:F2:D1:F2:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b8:4a:ec:70:d2:d2:dc:80:db:43:09:32:a4:b7:1d:ae:fb: 71:29:84:46:aa:dc:b0:7f:e0:83:99:0c:fe:6d:64:85:03:36: 40:9c:86:85:40:bb:37:50:cf:59:2c:93:51:4a:a6:c0:44:cb: ee:d0:72:e1:28:13:4d:81:c2:1b:f4:37:7b:8a:8d:ff:01:aa: f0:f4:aa:bf:21:4d:d7:ce:c6:42:53:d8:5a:d3:61:37:fc:cd: fd:06:44:1c:1f:d6:bc:26:f0:11:b7:c3:92:81:f1:b3:35:35: ae:6e:ef:e3:42:bb:51:6d:b0:3d:8d:cb:5e:91:c0:ac:7c:c2: 54:44:e7:df:e3:73:61:33:cf:3c:c8:0d:c1:1a:75:54:82:f0: d4:e1:2f:04:f8:45:8d:95:ec:9d:57:a3:f9:8e:6b:52:78:f2: 54:dd:66:4b:cb:8e:c6:c1:e6:9a:c0:32:02:97:cb:2a:e4:24: 8e:ec:42:4c:c6:74:52:72:50:8e:2b:68:13:f0:b1:95:ca:72: de:52:dc:ca:55:25:50:57:8d:63:60:f4:8a:b9:b7:37:50:11: 98:31:68:97:b5:2f:36:c3:55:20:78:b3:97:fa:2d:6c:38:56: 64:10:4b:60:94:a4:39:49:2c:08:3f:aa:3a:f4:d3:fc:32:a7: 3f:e2:62:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkGACSWNs5CtdPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmU0MTA3ODQtNjdlYy00YWYzLWIxNDAtNzM5M2E2OGY4N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZHIU3CG4/aCeWNXTOnpx3mITCr0l05MqbPi JBMJ37PB6p6sV1jzBj00Qu/pXBfRNz09IcJDcqhaalZZWGrxsw7qgUH8zvyHpUTU 2WwYmvfV4wGAG7X71b8i+KY98yidQe+Ys1jnJRKdaqPDoCJJ0UXrYm5o/1DflTtq cuUgLPcntakrAH0SI7EDW3F0ZYZkGBpU2Wsdsak/d446AWove1L3qiaiT23rdZ3/ r63FTkN8/oqssiCnom3fqCl/4RwogWtiUZFsNAdiyGZIRQDoyqR5b57ciz2GzWhD eoYjtpeMPmR+AjJRQziEerWHIaiXuZlODF4pThyfBEISbJU3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCmvYKKpY357/sqvCtBZNLy0fIJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2U4MjE5Y2MtYzVkMi0z NWFmLTg0YTUtYWFhOGMxNzVmZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu4Suxw0tLcgNtDCTKktx2u+3EphEaq3LB/4IOZDP5tZIUDNkCchoVA uzdQz1ksk1FKpsBEy+7QcuEoE02Bwhv0N3uKjf8BqvD0qr8hTdfOxkJT2FrTYTf8 zf0GRBwf1rwm8BG3w5KB8bM1Na5u7+NCu1FtsD2Ny16RwKx8wlRE59/jc2EzzzzI DcEadVSC8NThLwT4RY2V7J1Xo/mOa1J48lTdZkvLjsbB5prAMgKXyyrkJI7sQkzG dFJyUI4raBPwsZXKct5S3MpVJVBXjWNg9Iq5tzdQEZgxaJe1LzbDVSB4s5f6LWw4 VmQQS2CUpDlJLAg/qjr00/wypz/iYmU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:22 2025 by rpki-client